Concerned with software or hardware firewalls

learn more… | top users | synonyms (1)

2
votes
1answer
96 views

ASA5505 DMZ issue

I have ASA5505 , connected to the WAN on port 0 (called Vlan2), and connected to my development LAN on port 7 (Called Vlan1). I want to add DMZ, and I connected switch and servers to port 3, and ...
2
votes
1answer
197 views

How to configure Suricata to not interfere with virtual machine

I'm currently planning on setting up Suricata as a firewall on my laptop. I'm wondering however if it's possible to set Suricata to not interfere with traffic to and from specific virtual machines ...
2
votes
0answers
87 views

Shorewall stopped policies - routeback

Here goes a very specific question about the insides of Shorewall and Iptables in general. Shorewall supports configuration of "Stopped Policies" using the file routestopped, which defines the ...
2
votes
0answers
48 views

Could you attack a port without knowing what service was listening? [duplicate]

A lot of discussion I see suggests that changing default ports for services is just "security by obscurity" and is easily defeated by scanning for open ports. My question is this, though, if the ...
1
vote
4answers
14k views

How can attackers bypass firewalls? [closed]

I have read the Wikipedia article on firewalls but don't understand firewall security and how an attacker from the outside can bypass the firewall to hack target system. We all know it happens but ...
1
vote
2answers
2k views

What justification is there for Comcast to block SMTP port 25 outbound from residential service?

Within the last week, Comcast seems to have started blocking port 25 outbound from their residential internet service. I can sort of understand why they might justify blocking it inbound as perhaps ...
1
vote
5answers
487 views

How do a firewall's rules for individual programs work?

I kind of know that how a firewall's rules for IP/port work, but I have no idea how a firewall deals with individual programs. In other words, how does the firewall know a program wants to access the ...
1
vote
4answers
18k views

How to effectivily block torrents on my network?

Hie, As per my network policy, we have to block all torrent traffic from network. To do this, I used to block all ports above 1024 on my firewall/proxy devices. But due to this, many other ...
1
vote
3answers
4k views

What, specifically, does the Windows Firewall do?

My understanding of the situation is that, when the Windows firewall is off, every port on the computer (all 65535 of them) is fully open. This means that any application running on the computer can ...
1
vote
3answers
131 views

hardware firewall placement

In a home office environment with cable internet, can a hardware firewall be placed in front of/upstream from a cable modem to also protect the modem from tampering by the isp or a hacker?
1
vote
2answers
159 views

How to restrict access to unwanted sites?

I use Ubuntu 13.10. I tried to used OpenDNS to restrict some websites. Unfortunately, I couldn't do that. I use AirStream 1200 USB modem to access WiMax internet. OpenDNS setting didn't work for me at ...
1
vote
3answers
4k views

windows firewall turns OFF automatically

It seems pretty weird but for some reason, the Windows 7 firewall turns off. After I turn the firewall on in the control panel, it seems that it turns itself off when I go back to the control after I ...
1
vote
2answers
3k views

IPTables default security rules for a gateway/router?

On a router such as dd-wrt or tomato, what would be some default iptables rules? I am asking for rules on a router/gateway - For example; blocking SYN flood attacks, or XMAS attacks. The basic ...
1
vote
2answers
125 views

Do I need a hardware firewall even if I have Internet security software?

I have Kaspersky Internet Security 2010 installed on my Win7 computer. I assume it gives me enough protection for a software firewall(port security,tracking tcp,udp traffic etc.) Do I still need a ...
1
vote
2answers
1k views

How to check if a port can be accessed from the outside

I want to be sure that the firewall protecting the intranet is effectively rejecting/granting access to a port. I have no access to the firewall nor any other external machine. Is that possible at ...
1
vote
3answers
445 views

Testing Web Application Firewall Configuration (ModSecurity)

What is the best way of testing my Firewall configuration as i have deployed the Core Rule set provided by the OWASP. But my rule configuration was giving me too many false positives which i resolved ...
1
vote
2answers
66 views

Is rolling my own firewall on top of my normal firewall dangerous?

I'm thinking about playing with/learning about firewalls. It is easier for me to learn by building, so why not build a firewall? If I run it alongside my normal firewall, I'd get the normal ...
1
vote
3answers
1k views

How to setup an internal firewall

I'm hoping to get some advice on a project I've been asked to look after at work. I do all of the IT for a small company that sits inside of a larger corporation. We need to prevent access to ...
1
vote
1answer
186 views

Maximum protection on a computer network?

I would like to secure as much as possible a computer I am using to sync sensitive data files from work to my home pc. The syncronisation is being done by only 1 software is there a firewall to allow ...
1
vote
5answers
58 views

Firewall rules by URL

is there a solution to create FW rules by URL instead of IP for inbound traffic? For example a.example.com and b.example.com are the same IP on the DNS, but they are different sites, is there a ...
1
vote
2answers
107 views

How to prevent attacks to server

I have 3 CentOS server configured for my applications. Recently I recognized that there is so many attacks to my servers. I have so many logs about attempt to login to my servers using sshd from ...
1
vote
5answers
117 views

Do firewalls always run in userspace?

There are many Firewall solutions for the world on different operating systems: iptables, pf, ipfw. My question is: Does the firewalls run in kernel-space or all of them runs in user-space? (in ...
1
vote
2answers
256 views

how to find out if a program sends data to internet (without permission)?

We have an application to save our customers data (some kind of CRM). This application has been written in Delphi and is a client/server application. This program apparently is sending out ...
1
vote
1answer
340 views

Assuming no MITM, is Gmail communication 100% secure and private?

I sometimes have to use my personal Gmail account from my company workstation, where I know for fact they are using content-aware firewall(s) like Palo Alto, and potentially other nasty things like ...
1
vote
3answers
968 views

Best practices for firewall hardware

I'm planning to implement a linux based firewall/router with at least 6 x 1Gb NIC's (network with ~300 computers/server with >=8 VLANs) Can anybody recommend hardware best practices (reference to ...
1
vote
4answers
778 views

Connections through Firewalls explained

I'm looking for a good explanation of how connections work through firewalls. I've got the idea of packaging(encapsulating) some protocol inside another one as its payload when tunneling. But what I ...
1
vote
2answers
137 views

Looking for a taxonomy of web attacks

I am working on semantic representation of firewall rules but could not find a good taxonomy of Web attacks in terms of HTTP protocol. I do find web attack classification i.e XSS attack, SQL attack.
1
vote
2answers
699 views

How is iptables useful to prevent attacks against a LAN?

I need some advice securing a LAN using iptables. I've found lots of examples on how to secure single host with iptables, including scanning ports, attacking using ICMP-flood and TCP-flood. These ...
1
vote
2answers
221 views

Securing a VPN connection

I'm new to this we want to install a new VPN connection that will be used to connect using Internet to some networks in the office the contractor want to use a" Cisco NAC Network Module or Cisco IPS ...
1
vote
2answers
810 views

Open Source tool to block email attachments

Is there any way to stop users from sending attachments over Gmail or any web based email including private mail servers, if internet access is through a Linux box running Ip Tables/Squid etc. We are ...
1
vote
2answers
4k views

How secure is blocking all incoming connections on my ADSL or cable router?

My router, an up-to-date ADSL Fritz!Box 7340 router with a fixed leased IP address, has been configured to block all incoming traffic. Assuming, for the sake of argument, no extra security is ...
1
vote
2answers
3k views

What needs to be done on a Citrix Netscaler to protect from SSL Renegotiation attacks?

I'm under the impression that the TLS/SSL renegotiation hack has been fixed. I'm not sure if the software has to be deployed on the server side, client side, or both. Based on this blog, TLS ...
1
vote
2answers
71 views

How to block network scans with pfsense?

I am using pfsense as firewall, and I would like to know how I can stop network scans from enumerating open services and ports. Thanks
1
vote
2answers
141 views

What security does an ISP provide for its customers?

I've heard that ISPs provide some kind of protection; using NAT and firewalls, to prevent hackers from using tools such as nmap to attack customers from over the Internet. What other technologies are ...
1
vote
2answers
151 views

SSH Security allowing only certain users to connect to the server [closed]

I have set up a remote ssh server on the cloud. I am newb at these things and have managed to bypass the required firewall using SSH. Now I plan on giving the access to only 2 more friends of mine so ...
1
vote
3answers
101 views

Make firewall management public?

A friend of mine installed a new firewall software at his company. Sometimes he works from home, and also has to maintain the firewall. The firewall management software is a web site. My friend made ...
1
vote
4answers
769 views

Block all Nmap scan methods on Windows [closed]

How can I prevent someone from scanning my Windows box using Nmap? I used Comodo as my firewall but someone still can scan my box using Nmap and get some info like open services and OS detection.
1
vote
2answers
72 views

Should I use a firewall even though I am on a private vlan inside a data-center?

Working on setting up some new infrastructure and I want to configure everything so that it's as secure as it needs to be, but I don't want to worry too much about adding additional unneeded ...
1
vote
1answer
109 views

Why do outgoing rules have priority over incoming rules?

I've been spending the morning playing with my routers and I've checked one thing: All of them come by default with an implicit deny configuration for incoming traffic, that is all packets should be ...
1
vote
2answers
61 views

Handling security with sub-domains pointing to boxes

Generally, despite running hardware+software firewall combos and keeping every layer 7 aspect of the box secure, I don't like to disclose the direct IP addresses of our servers to the public as a ...
1
vote
3answers
1k views

Is an outbound firewall connection 'safer' than an inbound

We're trying to determine if pushing data through a firewall is more safe than pulling it. The data will be from SSIS to SSIS through the firewall. An advisor here has suggested that pushing the data ...
1
vote
2answers
151 views

IPTable Security between two servers

Is using IPTables to only allow traffic between two servers considered an acceptable practice? For example TCP traffic on a defined port. I realize this is referred to as an ACL but how secure is ...
1
vote
1answer
261 views

Whats a secure firewall rules using UFW?

On my Ubuntu server I have these services running: netstat -tlnp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program ...
1
vote
2answers
113 views

Correct way of establishing if the switch is sending syslogs?

I want to confirm through scanning means if the switch is sending syslog packets or not. What i did was run a nmap scan nmap -sV -p514 xxx.xx.xx.xx The result came out as closed. Does this ...
1
vote
3answers
3k views

Ignoring broadcasts to 10.0.0.255 using iptables

I'm trying to drop logging packets that are destined for 10.0.0.255 by using the following rules: $IPTABLES -A OUTPUT -d 10.0.0.255 -j DROP $IPTABLES -A FORWARD -d 10.0.0.255 -j DROP It ...
1
vote
2answers
379 views

Is the level of traffic normal against my blocked ports?

I was recommended by my brother to direct the question here about the level of traffic I get against several of my blocked ports. I run pfsense 1.2.3, router in bridge. Behind pfsense I have: 1x ...
1
vote
2answers
77 views

How does Network Address Translation (NAT) increase firewall effectiveness

Truth or bald-faced lie: the cheap $50 router you can pick up at your local electronics store for your home broadband Internet connection is actually a pretty effective firewall. Why or why not? How ...
1
vote
2answers
46 views

Does it make sense to log accepted traffic on firewall?

Assuming a firewall is properly setup, only allowing determined traffic and dropping everything else, what relevant information (if any) could I get from the log of the accepted rules? From the ...
1
vote
3answers
333 views

Best practice for accessing management port of firewall

I'm in the process of setting up a bunch of servers at the other end of the world (well, 8 hours travel time) in a co-location place. The servers and firewall all have a remote management port (KVM, ...
1
vote
2answers
228 views

Are KIS 2014, Malewarebytes Pro and SpyBot sufficient to prevent internet attacks?

As mentionned in the title, I have KIS 2014, Malewarebyte Pro and Spybot installaed on my windows 7 (regularly updated). I regularly scan my pc for viruses and spywares and clean it with Glary ...